Skip to content
OpenAdvisories

Archive

9 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /9 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-12920

    qianfox FoxCMS Product.php edit cross site scripting

    A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the att…

    QianFox FoxCMS
  • Low 3.7
    CVE-2025-12919

    EverShop Order Order.resolvers.js resource injection

    A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of reso…

    @evershop/evershop npm
  • Low 3.1
    CVE-2025-12918

    yungifez Skuul School Management System View Fee Invoice fee-invoices resource injection

    A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoic…

    yungifez Skuul School Management System yungifez/skuul Packagist